CVE-2021-44600

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information about the users of this system.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.26% chance of exploitation in the next 30 days, 67th percentile

Published

2021-12-23

Updated

2024-08-04

Proof-of-concept exploits (1)

• nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/MSMS

References

• CVE Record
• NVD entry

Related

• CVE-2021-44599
• CVE-2021-4461
• CVE-2021-44598
• CVE-2021-44617
• CVE-2021-44596
• CVE-2021-4462